1 <!DOCTYPE HTML PUBLIC
"-//W3C//DTD HTML 3.2//EN">
4 <TITLE> Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)
6 <LINK REL=
"Index" HREF=
"index.html" >
7 <LINK REL=
"made" HREF=
"mailto:ircservices%40ircservices.za.net?Subject=Proxy%20scanning%20%28was%20RE%3A%20%5BIRCServices%5D%20Another%20Feature%20Suggestion%29&In-Reply-To=">
8 <META NAME=
"robots" CONTENT=
"index,nofollow">
9 <META http-equiv=
"Content-Type" content=
"text/html; charset=us-ascii">
10 <LINK REL=
"Previous" HREF=
"002950.html">
11 <LINK REL=
"Next" HREF=
"002946.html">
13 <BODY BGCOLOR=
"#ffffff">
14 <H1>Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)
</H1>
16 <A HREF=
"mailto:ircservices%40ircservices.za.net?Subject=Proxy%20scanning%20%28was%20RE%3A%20%5BIRCServices%5D%20Another%20Feature%20Suggestion%29&In-Reply-To="
17 TITLE=
"Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)">rosshosman at charter.net
19 <I>Fri May
31 14:
58:
01 PDT
2002</I>
21 <LI>Previous message:
<A HREF=
"002950.html">Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)
23 <LI>Next message:
<A HREF=
"002946.html">[IRCServices] Another Feature Suggestion
25 <LI> <B>Messages sorted by:
</B>
26 <a href=
"date.html#2951">[ date ]
</a>
27 <a href=
"thread.html#2951">[ thread ]
</a>
28 <a href=
"subject.html#2951">[ subject ]
</a>
29 <a href=
"author.html#2951">[ author ]
</a>
34 <PRE>wasn't heh, sorry
35 ----- Original Message -----
36 From:
"Ross Hosman
" <<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">rosshosman at charter.net
</A>>
37 To:
<<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices at ircservices.za.net
</A>>
38 Sent: Friday, May
31,
2002 7:
51 AM
39 Subject: Re: Proxy scanning (was RE: [IRCServices] Another Feature
43 ><i> btw, I was suggesting floodserv as a proxy monitor but as a
45 ><i> flood monitor.
47 </I>><i> ----- Original Message -----
48 </I>><i> From:
"Russell Garrett
" <<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">rg at tcslon.com
</A>>
49 </I>><i> To:
<<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices at ircservices.za.net
</A>>
50 </I>><i> Sent: Friday, May
31,
2002 5:
17 AM
51 </I>><i> Subject: RE: Proxy scanning (was RE: [IRCServices] Another Feature
52 </I>><i> Suggestion)
55 </I>><i> > > Since Services
5 will (or at very least could, given
56 </I>><i> > > coding for a module)
57 </I>><i> > > sport global Z: line management, would it make sense to
58 </I>><i> > > have it send a
59 </I>><i> > > message so that it adds your desired Z: line to Services?
60 </I>><i> > > Or should one
61 </I>><i> > > collect up the accumulated Z: lines on the respective
62 </I>><i> > > servers BOPM is
63 </I>><i> > > running on and manually add them later?
65 </I>><i> > The only problem with this is the single-point-of-failure problem: If
66 </I>><i> > someone DoSes your Services server, or the services hub off, then the
67 </I>><i> > point of having a seperate proxy monitor on each server is defeated,
68 </I>><i> > as they can't submit their z:lines.
70 </I>><i> > The most resilient solution, at least with BOPM, is to get each
71 </I>><i> > individual BOPM bot to submit by e-mail to blitzednet's DNS blacklist
72 </I>><i> > (you have to e-mail them to set this up, but it's very efficient) -
73 </I>><i> > all the other BOPM proxy monitors on your network and everywhere else
74 </I>><i> > will then pick compromised hosts up almost immediately using the
75 </I>><i> > blacklist lookup, without having to scan. This removes the
76 </I>><i> > single-point-of-failure problem (well I suppose someone could still
77 </I>><i> > DoS the blacklist server, but that would only slow down the k:lining
78 </I>><i> > of proxybots - if you're that paranoid you could use your own
79 </I>><i> > blacklist server).
81 </I>><i> > Russ Garrett
82 </I>><i> > <A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">russ at garrett.co.uk
</A>
83 </I>><i> > www.faereal.net
85 </I>><i> > ------------------------------------------------------------------
86 </I>><i> > To unsubscribe or change your subscription options, visit:
87 </I>><i> > <A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">http://www.ircservices.za.net/mailman/listinfo/ircservices
</A>
89 </I>><i> ------------------------------------------------------------------
90 </I>><i> To unsubscribe or change your subscription options, visit:
91 </I>><i> <A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">http://www.ircservices.za.net/mailman/listinfo/ircservices
</A>
100 <LI>Previous message:
<A HREF=
"002950.html">Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)
102 <LI>Next message:
<A HREF=
"002946.html">[IRCServices] Another Feature Suggestion
104 <LI> <B>Messages sorted by:
</B>
105 <a href=
"date.html#2951">[ date ]
</a>
106 <a href=
"thread.html#2951">[ thread ]
</a>
107 <a href=
"subject.html#2951">[ subject ]
</a>
108 <a href=
"author.html#2951">[ author ]
</a>
projects / irc.git / blob